CVE-2016-5759

The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.

Score

CVSS 3.0 7.8 High

Status

Modified - security@opentext.com

Published

2017-09-08

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Suse Linux Enterprise Desktop (Novell)
• Suse Linux Enterprise Server (Novell)
• Leap (Opensuse)

References

• http://lists.opensuse.org/opensuse-updates/2016-10/msg00083.html
• http://lists.suse.com/pipermail/sle-security-updates/2016-October/002337.html